Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2eb7182a-e3c0-3d21-8236-40e8eb060e8d.roa
File:                     2eb7182a-e3c0-3d21-8236-40e8eb060e8d.roa (raw, json)
Hash identifier:          knx1WH/jVrSYYT5zLrCbawkipAmJNyfKuFTJqC9pQ/s=
Subject key identifier:   81:B0:6D:94:1B:A9:D4:3C:CA:FF:E4:9F:7B:1A:D8:82:79:0A:A1:B7
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FFBB781B1589BE33FC0CC4500
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2eb7182a-e3c0-3d21-8236-40e8eb060e8d.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     7018
IP address blocks:        104.234.112.0/24 maxlen: 24
                          104.234.113.0/24 maxlen: 24
                          104.234.114.0/24 maxlen: 24
                          104.234.115.0/24 maxlen: 24
                          104.234.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fb:b7:81:b1:58:9b:e3:3f:c0:cc:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=99cb9a6e-f129-4169-8f18-5db018a88ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:59:7b:10:06:57:83:69:29:a4:66:5c:13:
                    ff:12:ca:ba:66:11:1f:a2:0b:b4:a2:06:2e:56:eb:
                    94:2b:22:9e:d3:89:e0:44:b4:2d:f3:08:d1:1b:0b:
                    d8:87:7e:0e:4b:aa:03:36:d1:5d:6d:cb:86:60:69:
                    5e:f0:4e:ca:c2:d0:ac:f6:8c:75:43:37:ff:0f:c4:
                    7e:4f:9a:00:6f:7e:41:b6:07:86:01:38:9c:42:d7:
                    de:0d:e5:b9:f9:53:73:d3:dd:ec:a1:4e:8a:bb:e6:
                    60:53:8b:00:42:7d:9e:ce:bd:10:39:47:7e:bc:69:
                    55:ee:03:f8:e1:fb:31:20:25:3b:75:91:8e:0c:30:
                    ad:1f:67:dc:df:28:4c:f1:26:e1:47:f9:f2:e7:de:
                    ac:83:2a:8f:e7:60:82:95:4f:43:2e:07:c0:b4:fe:
                    8d:31:2e:a3:22:f0:a4:c6:3c:b9:09:ca:cf:65:35:
                    e8:7b:41:b1:70:8d:51:10:fb:cf:f6:7d:47:23:1c:
                    eb:e0:e0:75:a5:d2:f3:52:a5:d7:0c:2f:e3:e5:99:
                    a4:45:d2:c1:ae:67:a7:a5:b0:c9:a9:3a:bc:fa:85:
                    27:43:6c:83:ec:fc:a2:ed:0d:fd:63:13:b3:7b:58:
                    23:31:29:3e:00:cd:f2:85:f9:23:8c:63:4a:89:e3:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B0:6D:94:1B:A9:D4:3C:CA:FF:E4:9F:7B:1A:D8:82:79:0A:A1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2eb7182a-e3c0-3d21-8236-40e8eb060e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.112.0/22
                  104.234.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:80:c4:3b:9f:d7:cc:49:c6:9a:79:27:fd:f7:bb:3f:90:
         61:00:8f:de:76:49:56:ff:9f:e3:3e:1e:e2:a6:34:b3:45:2b:
         69:fa:d9:e4:33:b2:fd:3f:93:9a:28:bb:22:3b:1e:6e:b8:b2:
         31:a1:83:37:b7:79:6d:b9:84:e8:d7:5c:ec:db:21:78:82:6c:
         1c:ef:a4:bc:16:86:5e:4e:12:23:2b:00:9f:bc:f0:c9:d3:25:
         ea:e1:fd:7f:b3:c2:fc:04:b0:1a:4c:1b:f4:0b:b6:c7:49:4a:
         f2:29:8c:27:65:61:26:29:c4:5a:fd:54:43:11:03:dd:49:10:
         23:b9:8c:98:6d:cc:cb:b1:a7:89:21:60:da:a7:1e:15:e6:c9:
         31:7c:de:1c:7b:09:1c:00:83:dc:ef:17:03:4e:0f:c8:b0:98:
         7e:1c:08:e9:7f:62:5c:1e:7d:da:75:50:51:19:7d:b6:72:8f:
         23:6e:40:7b:cb:62:b9:9c:50:05:7a:2f:13:69:ee:c0:82:f0:
         51:95:7a:06:08:68:12:0f:45:85:a5:a8:b5:9f:cc:af:1a:e9:
         d6:25:fe:cb:d0:c4:3e:dd:1b:42:7e:7c:14:fe:57:ad:65:49:
         5d:bb:55:a5:1d:da:50:91:97:e2:a3:91:d1:df:a2:68:59:5c:
         f3:8c:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:54 2023 by rpki-client on console-fra.rpki-client.org